Merge pull request #10 from express-rate-limit/enable-npm-provenance

ci: enable provenance statement generation

Author: adrianprelipcean

.github/workflows/cicd.yml

@@ -108,6 +108,9 @@ jobs:
     runs-on: ubuntu-latest
     needs: [ci-node,ci-db-linting,ci-db-testing]
     if: startsWith(github.ref, 'refs/tags/v')
+    permissions:
+      contents: write
+      id-token: write
     steps:
       - name: Checkout the repository
         uses: actions/checkout@v3
@@ -118,7 +121,7 @@ jobs:
       - name: Install dependencies
         run: npm ci
       - name: Publish package to NPM
-        run: npm publish --access=public
+        run: npm publish --provenance --access=public
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
       - name: Build package to upload to GitHub releases
@@ -131,4 +134,4 @@ jobs:
           files: acpr-rate-limit-postgresql.tgz
           body:
             You can view the changelog
-            [here](https://github.com/adrianprelipcean/express-rate-limit-postgresql/blob/master/changelog.md).
+            [here](https://github.com/adrianprelipcean/express-rate-limit-postgresql/blob/master/changelog.md).

changelog.md

@@ -6,6 +6,13 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.3.2](https://github.com/adrianprelipcean/express-rate-limit-postgresql/releases/tag/v1.3.2)
+
+### Added
+
+- Enabled provenance statement generation, see
+  https://github.com/express-rate-limit/express-rate-limit#406.
+
 ## [1.3.1](https://github.com/adrianprelipcean/express-rate-limit-postgresql/releases/tag/v1.3.1)
 
 ### Changed